Description (CNA)
Bidirectional Unicode text can be interpreted and compiled differently than how it appears in editors which can be exploited to get nefarious code passed a code review by appearing benign. An attacker could embed a source that is invisible to a code reviewer that modifies the behavior of a program in unexpected ways.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Google LLC / Dart SDK | affected unspecified before 2.15.0-268.18.beta |
CWE
CWE-284
References
- https://github.com/dart-lang/sdk/blob/main/CHANGELOG.md
- https://github.com/dart-lang/sdk/commit/52519ea8eb4780c468c4c2ed00e7c8046ccfed41
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.